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1-15. (canceled) 

16. (cuiTcntly amended) In an appliance communication network, a method for 
authenticating appliance messages, the method comprising: 

maintaining at an appliance communication center a first shared message counter that 
counts messages communicated between the appliance communication center and a first 
apphance, the first shared message counter shared between the communication center and the 
first appliance; 

maintaining at the appliance communication center a second shared message counter 
that counts messages communicated between the appliance communication center and a 
second apphance, the second shared message counter provides a count separate from a count 
provided by the first shared message counter; 

generafing a first authentication word by applying an apphance message and the first 
shared message counter, as stored in the communication center, to an authentication 
algorithm: and algorithm; 

transmitting the appliance message and the first authentication word as an 
authenticated message to the first appliance. appliance: and 

changing, within the first appliance, a first keying variable by installing a master 
keying variable within the first appliance and the appliance communication center, wherein 
the first keying variable is xised to generate a second authentication word configured to be 
compared with the first authentication word, and the second authentication word is different 
from the appliance message. 

17. (currently amended) The method of claim 16, further comprising: 
receiving the authenticated message at the first appliance; 
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applying a third shared message counter, as stored in the first appHance, and the 
apphance message to the authentication algorithm to generate a second the second 
authentication word; and 

comparing the first authentication word and the second authentication word to 
determine authenticity of the authenticated message. 

18. (previously presented) The method of claim 17, further comprising 
incrementing the third shared message counter, as stored in the first appliance, after receiving 
a genuine authenticated message at the first appliance. 

19. (original) The method of claim 16, wherein applying comprises applying an 
authentication keying variable, K. 

20 (previously presented) The method of claim 19, wherein applying comprises: 

establishing a working register R, comprising at least bytes RO, Rl, R2, R3; 

initiahzing R3 to a directional code, representing a transmission from the appliance 
communication center to the first appliance; 

initializing at least R2, Rl, and RO to a plurahty of bytes C2, CI, and CO of the first 
shared message counter, as stored in the communication center, respectively; 

iteratively performing at least one arithmetic, logical and shifting operation on R; and 

setting the first authentication word equal to the value contained in R. 

21 . (previously presented) The method of claim 20, wherein iteratively 
performing at least one arithmetic, logical and shifting operation on R comprises iteratively 
performing, as many times as there are bytes in K, the steps of: 

establishing an index, equal to the greater of: 
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a non-zero constant; and 



a number of bytes in the appliance message less one; 



and 



iteratively perfomiing, a number of times equal to the index plus one: 



forming P as a dot product of R2 and RO; 



'01010101'; 



message; and 



fonning Q as a bitwise exclusive or of P with a constant expression 



forming S by adding Q to K; 



forming S' by end around rotating S; 



forming T as the bitwise exclusive or of S' and R3; 



forming F as the bitwise exclusive or of T with a byte of the appliance 



replacing R3 with R2, R2 with Rl, Rl with RO, and RO with F. 



22. (original) The method of claim 21, wherein the non-zero constant is at least 3. 

23. (canceled) 

24. (previously presented) The method of claim 16, further comprising 
incrementing the first shared message counter, as stored in the communication center, after 
transmitting the authenticated message to the first appliance. 

25. (currently amended) A system comprising: 

a plurality of appliances including a first appliance and a second appliance; and 
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an appliance communication center including: 

network connections terminating at the appliances; 
a processing circuit; 

a memory storing a plurality of shared counters including a first shared 
message counter and a second shared message counter, the first shared message counter 
shared between the appliance communication center and the first appliance, the second 
shared message counter shared between the communication center and the second apphance, 
the first shared message counter configured to provide a count separate from a count provided 
by the second shared message counter, the first and second shared message counters 
configured to be non-resettable, the memory further storing instructions for: 

maintaining at an applianc e the appliance communication center the 
first shared message counter; 

generating a first authentication word by appljdng an appHance 
message and the first shared message counter, as stored in the appUance communication 
center, to an authentication algorithm; and algorithm; 

transmitting the appliance message and the first authentication word as 
an authenticated message to the first applianc e . appliance; and 

transmitting a command to change, within the first appliance, a first 
keying variable, wherein the first keying variable is changed by installing a master keying 
variable within the first appliance and the appliance communication center, and the first 
keying variable is used to generate a second authentication word configured to be compared 
with the first authentication word. 

26. (canceled) 
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27. (previously presented) The appliance communication center of claim 25, 
wherein the memory further stores instructions for incrementing the first shared message 
counter, as stored in the appliance communication center, after transmitting the authenticated 
message to the first appliance. 

28. (currently amended) A system comprising: 
a first appliance including: 

a first shared message counter; 
a processor; and 

a memory coupled to the processor, the memory storing instructions for 
execution by the processor for: 

receiving an authenticated message, including a first authentication 
word and an appliance message, at the first appliance; 

generating a second authentication word by applying the first shared 
message counter, as stored in the first appliance, and the appliance message to an 
authentication algorithm; and 

comparing the first authentication word and the second authentication 
word to determine authenticity of the authenticated message; 

a second appliance separate from the first appliance; and 

an appliance communication center including a second shared message counter and a 
third shared message counter, the second shared message counter shared between the 
appliance communication center and the first appliance, the third shared message counter 
shared between the communication center and the second appliance, and the third shared 
message counter configured to provide a count separate from a count provided by the second 
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shared message counter , wherein the memory configured to store instructions to chan^^e, 
within the lu'st appHance, a first keying variable by instaUing a master keying variable within 
the first appliance and the appliance communication center, wherein the first keying variable 
is used to generate the second authentication word . 

29. (previously presented) The appliance message authentication device of claim 
28, wherein the memory stores instructions for execution by the processor for incrementing 
the first shared message counter, as stored in the first apphance, after receiving a genuine 
authenticated message at the first apphance. 

30. (currently amended) In an appliance communication network, a method for 
authenticating appliance messages, the method comprising: 

maintaining at a first appliance a first non-resettable shared message coimter, the first 
non-resettable shared message counter shared between the first appliance and a remotely 
located appliance communication center; 

maintaining at the appliance communication center a second non-resettable shared 
message counter that counts messages communicated between the appliance communication 
center and the first appliance; 

maintaining at the appliance communication center a third non-resettable shared 
message counter that counts messages communicated between the appliance communication 
center and a second appliance, the third non-resettable shared message counter provides a 
count separate from a count provided by the second non-resettable shared message counter; 

generating a first authentication word by applying an appliance message and the first 
non-resettable shared message counter, as stored in the first appliance, to an authentication 
algorithm: and algorithm; 
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transmitting the appliance message and the first authentication word as an 
authenticated message to the appHance communication center. center; and 

changing, within the first appliance, a first keying variable by installing a master 
keying variable within the first appHance and the appliance communication center, wherein 
the first keying variable is used to generate the first authentication word. 

31 . (previously presented) The method of claim 30, further comprising: 

receiving the authenticated message at the appliance communication center; 

applying the second non-resettable shared message counter, as stored in the 
appliance communication center, and the appliance message to the authentication algorithm 
to generate a second authentication word; and 

comparing the first authentication word and the second authentication word to 
determine authenticity of the authenticated message. 
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